InterceptSuite

InterceptSuite !IMPORTANT This repository has been archived. The active InterceptSuite codebase is now closed-source and paid-only. See below for details. About InterceptSuite was created to solve a long-standing problem in security testing - intercepting and inspecting non-HTTP traffic. While...

ferret

Ferret The collaborative MITM proxy for security testers. Capture HTTP traffic, annotate requests with AI, run hunt sessions, replay traffic, and track findings from one interface. Quick start · Features · Screenshots · Configuration · Security · Contributing Quick start Install git clone...

Hermes-Proxy

Hermes Proxy Hermes Proxy is a desktop HTTP/HTTPS interception app built with Electron and Vite. It captures requests/responses, lets you replay requests, and export/import HAR files. Features Live traffic table with request/response details Replay requests with editable URL/headers Export all...

CVE-2024-23997

YANA Notebook PoC A Proof-Of-Concept for CVE-2024-23997 vulnerability. 1. Vunerability Overview: Vulnerability Subject: Local Code Excution via XSS Vulnerability Version: = 1.0.16 Attack Type: Remote Code Execution Attack Vectors: To exploit the vulnerability, we must intercept an HTTP packet...

mitm-router

☠ Router de Hombre-en-el-medio 🌐 Convierte cualquier computadora Linux en una red Wi-Fi pública que realiza MITM silenciosamente en todo el tráfico HTTP. Se ejecuta dentro de un contenedor Docker usando hostapd, dnsmasq, y mitmproxy para crear una red inalámbrica honeypot abierta llamada "Public"...

ritm

Ruby In The Middle Proxy de intercepción HTTP/HTTPS Ruby in the middle RITM es un proxy de intercepción HTTP/HTTPS con generación y firma de certificados sobre la marcha, que deja al usuario con todo el poder del lenguaje Ruby para interceptar e incluso modificar peticiones y respuestas a su...

xepor

Xepor Xepor pronunciado /ˈzɛfə/ , céfiro es un framework de enrutamiento web para ingenieros inversos e investigadores de seguridad. Proporciona una API similar a Flask para que los hackers intercepten y modifiquen solicitudes y/o respuestas HTTP en un estilo de codificación amigable para los...

cdb

Pown CDB Pown CDB è un'utilità per il Chrome Debug Protocol. L'obiettivo principale dello strumento è automatizzare i compiti comuni per aiutare a eseguire il debug di applicazioni web dalla riga di comando e monitorare e intercettare attivamente richieste e risposte HTTP. Ciò è particolarmente...

zen-desktop v0.25.1

Zen: Your Comprehensive Ad-Blocker and Privacy Guard There is, simply, no way, to ignore privacy. Because a citizenry’s freedoms are interdependent, to surrender your own privacy is really to surrender everyone’s. Edward Snowden, Permanent Record Website • Mastodon • Bluesky • Discord •...

CVE-2026-81691 openssl_encrypt before 1.4.9 Credential Leakage via Unvalidated Server URLs

opensslencrypt versions before 1.4.9 fail to validate server URLs in login and registerwithemail functions, accepting unencrypted http:// URLs and unconfigured hosts. Attackers on the network path can intercept cleartext credentials including clientid, passwords, and JWTs to achieve full keyserve...

CVE-2026-46398

HAX CMS helps manage microsite universe with PHP or NodeJs backends. Starting in version 25.0.0 and prior to version 26.0.0, the haxcmsrefreshtoken cookie is set without the Secure flag. This allows it to be transmitted over unencrypted HTTP, making it vulnerable to theft via packet sniffing on t...

CVE-2026-10584 HTTPS Fallback to HTTP in Graph Explorer

Proxy server in Graph Explorer before 3.0.1 falls back to HTTP when certificate files are missing, which might allow remote threat actors to obtain sensitive information via interception of requests intended to be sent over HTTPS. To remediate this issue, users should upgrade to Graph Explorer...

NocoDB: Refresh Token Cookie Set Without `secure` and `sameSite` Flags

Summary The refresh-token cookie was set with httpOnly: true but missing both the secure flag and the sameSite attribute. Over plain HTTP the cookie could be intercepted on the network; without sameSite, browsers attached it to cross-site POSTs, enabling CSRF against the token-refresh endpoint...

CVE-2026-33472 Cryptomator Hub OAuth token exchange HTTP downgrade via getAuthority() scheme confusion (CVE-2026-32303 bypass)

Cryptomator is an open-source client-side encryption application for cloud storage. Version 1.19.1 contains a logic flaw in CheckHostTrustController.getAuthority that allows an attacker to bypass the security fix for CVE-2026-32303. The method hardcodes the URI scheme based on port number, causin...

EUVD-2013-3916

Malware in sbrugna...

U.S. Dept Of Defense: Sensitive Data Exposure at https://█████████

Sensitive data exposure was discovered in an endpoint of a website, which contained AWS S3 credentials, PATH, IP, and PORTs. This could have allowed an attacker to gain access to sensitive information on the AWS account or perform arbitrary modifications on the AWS resources...

MITM_Intercept - A Little Bit Less Hackish Way To Intercept And Modify non-HTTP Protocols Through Burp And Others

A little bit less hackish way to intercept and modify non-HTTP protocols through Burp and others with SSL and TLS interception support. This tool is for researchers and applicative penetration testers that perform thick clients security assesments. An improved version of the fantastic mitmrelay...

DEBIAN-CVE-2019-25031

Unbound before 1.9.5 allows configuration injection in createunboundadservers.sh upon a successful man-in-the-middle attack against a cleartext HTTP session. NOTE: The vendor does not consider this a vulnerability of the Unbound software. createunboundadservers.sh is a contributed script from the...

Design/Logic Flaw

The /password.html page of the Web management interface of the Acexy Wireless-N WiFi Repeater REV 1.0 28.08.06.1 contains the administrator account password in plaintext. The page can be intercepted on HTTP...

CVE-2021-28937

The /password.html page of the Web management interface of the Acexy Wireless-N WiFi Repeater REV 1.0 28.08.06.1 contains the administrator account password in plaintext. The page can be intercepted on HTTP...